Skip to content

Known vulnerabilities in BoldThemes Bold Page Builder

Is your version affected?

CVE Summary Score Published
CVE-2026-6173 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background_image'… 6.4 Medium Sep 30, 2026
CVE-2026-6171 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' parameter of… 6.4 Medium Sep 30, 2026
CVE-2026-6170 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'images' parameter of… 6.4 Medium Sep 30, 2026
CVE-2026-6172 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' parameter of… 6.4 Medium Sep 30, 2026
CVE-2026-88037 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `title` attribute of the… 6.4 Medium Sep 30, 2026
CVE-2026-5920 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortcode_content'… 6.4 Medium Sep 16, 2026
CVE-2026-62110 Contributor Cross Site Scripting (XSS) in Bold Page Builder <= 5.9.9 versions 6.5 Medium Sep 11, 2026
CVE-2026-2357 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium Aug 16, 2026
CVE-2026-3694 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of… 6.4 Medium May 14, 2026
CVE-2026-25451 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold… 6.5 Medium Feb 19, 2026
CVE-2025-12159 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium Feb 7, 2026
CVE-2025-13463 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Grid component in… 6.4 Medium Feb 7, 2026
CVE-2025-12803 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin 'bt_bb_tabs'… 6.4 Medium Feb 7, 2026
CVE-2025-15267 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium Feb 7, 2026
CVE-2025-66057 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold… 6.5 Medium Nov 21, 2025
CVE-2025-7730 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter… 6.4 Medium Oct 23, 2025
CVE-2025-58194 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold… 6.5 Medium Aug 27, 2025
CVE-2025-54006 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold… 6.5 Medium Jul 16, 2025
CVE-2024-5647 Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups… 6.4 Medium Jul 3, 2025
CVE-2025-5286 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘additional_settings’… 6.4 Medium May 29, 2025
CVE-2025-3715 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-text parameter in… 6.4 Medium May 18, 2025
CVE-2025-47525 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold… 5.9 Medium May 7, 2025
CVE-2025-47488 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold… 6.5 Medium May 7, 2025
CVE-2024-54382 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in boldthemes Bold Page… 4.9 Medium Dec 16, 2024
CVE-2024-53801 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold… 6.5 Medium Dec 6, 2024

Other BoldThemes products